Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File:                     mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier:          tsQomrnxXLlYI/K2HazPofh2IAQu65dcnAF4/VPR//0=
Subject key identifier:   FA:87:6A:6F:EE:6A:89:5C:98:6A:E3:2C:70:A5:02:0E:2C:28:51:BD
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer:       /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial:       0194BD857701D7D34797F86C5B0AF5004ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number:          1128
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
                          2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
                          3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
                          4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
                          5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: i1CTog1lUahTvdy5QPdI9uS7JhWoWtePJjPPnm34bB4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:77:01:d7:d3:47:97:f8:6c:5b:0a:f5:00:4e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=fa876a6fee6a895c986ae32c70a5020e2c2851bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:fc:66:6d:c9:1b:2f:4f:ca:9f:3a:d8:c2:
                    31:93:01:cb:11:ee:4a:d5:92:78:67:72:24:6b:93:
                    d3:f5:a7:99:05:3c:98:52:3f:d0:41:65:5d:64:e7:
                    5d:93:6e:0d:10:93:5d:c2:2e:f5:88:f3:ca:d0:10:
                    60:3f:21:b8:35:76:56:be:a4:7a:23:8f:e8:59:a5:
                    b6:9c:10:6d:d2:03:49:f8:5e:eb:92:56:e0:9b:75:
                    f7:ba:01:88:2e:fa:92:af:87:f9:18:48:f6:73:27:
                    ee:86:00:34:57:74:47:0f:fa:43:c9:c2:76:08:ef:
                    44:10:b7:33:fe:57:65:08:cf:5c:e1:0e:1b:60:f6:
                    12:44:85:6c:ad:92:f7:d9:e2:f3:1a:2d:10:1a:c2:
                    ca:bf:47:ea:b7:48:b7:5b:4d:37:41:c9:a8:cb:57:
                    ee:41:6f:03:c5:64:fa:05:b8:d2:d1:e9:ab:13:a5:
                    5b:2b:9c:c7:55:8c:78:06:a5:a5:17:94:72:98:86:
                    33:bf:82:cf:5c:83:2d:0f:7f:eb:2a:2c:97:d0:3f:
                    6a:1e:91:7a:ea:38:fd:d2:01:3e:e5:de:22:de:52:
                    ce:ff:26:33:53:1d:63:6b:4c:9a:49:86:85:9f:e9:
                    38:fb:a2:30:85:5a:df:1c:94:66:dc:c8:ab:d7:d7:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:87:6A:6F:EE:6A:89:5C:98:6A:E3:2C:70:A5:02:0E:2C:28:51:BD
            X509v3 Authority Key Identifier:
                keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:09:63:de:29:1d:3b:11:ae:d9:72:62:72:68:77:f9:a3:
         4a:8b:32:29:bc:57:a8:35:de:63:3a:3c:9b:0c:53:23:60:e5:
         07:25:b6:ad:79:6a:cc:03:95:b4:36:5c:8a:7d:e4:e8:8c:c0:
         20:ae:d6:85:e7:5a:7b:a2:4d:d5:47:e3:b7:22:37:81:6a:aa:
         08:d5:f4:4e:ce:ae:df:6d:4e:3f:47:8e:bd:27:31:2e:db:d7:
         4d:7d:8c:f5:cf:f3:08:01:93:30:62:22:8f:f3:56:86:a9:04:
         02:8b:b5:ef:e1:7d:d4:80:7a:58:e8:b0:a9:5b:c4:9a:15:2d:
         59:37:f4:c7:d4:8b:42:66:51:6f:dc:0c:b4:43:b2:03:ad:55:
         03:fa:24:24:e3:5b:d9:7c:2c:e2:aa:a8:e7:90:c0:ae:87:76:
         22:3a:45:9a:0a:d2:3b:5e:a2:51:d1:e3:70:dc:8d:aa:fa:c1:
         bc:ea:86:7d:4b:0d:64:93:ef:70:d7:b7:9f:20:9f:00:7b:f2:
         aa:ac:ba:da:01:5f:fd:db:53:aa:ec:f7:69:f0:30:7d:44:89:
         d9:be:f8:2f:8f:00:a3:31:e4:24:4f:30:bf:b8:7d:6e:88:6b:
         d9:49:c6:ce:67:e6:78:63:be:31:4a:65:f6:b1:f2:3f:93:91:
         17:f3:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----